cloud-iam-deep

SUSPICIOUS/HIGH-RISK skill. The footprint matches its stated red-team purpose, but that purpose is to enable cloud exploitation: using found credentials, enumerating services, extracting code/data, and performing unauthorized write/delete actions. Data flows go mostly to official provider APIs, so this is not credential-harvesting malware, but it is a high-risk offensive security skill that can cause real-world harm.